AI Inside Commercial Ops

You Measure Molecules This Way. Your AI Deserves the Same.

Pharma measures every molecule against a control. Almost no AI gets the same. Six systems here do.

· Ken Bennett · 14 min read

1. Executive Summary

Ninety-five percent of enterprise generative-AI pilots deliver no measurable P&L impact. That figure, from a 2025 MIT study, is now widely cited across the pharma-AI advisory literature, and it has a quieter companion finding: the failures are rarely failures of ambition. They are failures of measurement. Teams deploy an AI system, observe a business outcome, and attribute the outcome to the system without ever testing the system itself. When the outcome disappoints, no one can say whether the model was wrong, the workflow was wrong, or the success criteria were never defined.

Pharma already owns the discipline that closes this gap. It is called a clinical trial. A clinical trial does not ask "did the patient get better." It asks "did the patient get better because of the intervention, measured against a control, on pre-registered endpoints, at a sample size large enough to trust." That is exactly the question almost no one is asking about their AI systems.

This report documents what happens when you ask it. In May 2026, Penwood built six internal AI systems that run its own operations, and measured every one of them the way pharma measures any clinical endpoint: an explicit assertion suite, a control arm (the same AI without the system loaded), parallel test runs, an independent grader, and a pass-rate delta reported in percentage points. Where a result looked soft, it was re-run at higher sample size. Where a sharpening attempt backfired, that is reported too.

The six systems produced with-system versus without-system deltas ranging from +66.7 to +100 percentage points at first measurement, with several reaching a perfect +100pp after one iteration. The strongest single anchor scored 52 of 52 assertions passing with the system loaded, against 6 of 52 without it (a +88.46pp delta). The full table is in Section 4.

Key Finding: The question "is this AI any good" is usually answered with a vibe. It can be answered with a number. Across six production systems, the same AI, given the same prompt in the same session, passed 10 to 100 percent fewer quality assertions when the Penwood system was removed. That gap is the measurable contribution of the system. Outcome-only reporting cannot see it.

The argument of this report is not "AI works." Everyone has heard that. The argument is that the measurement discipline pharma reserves for molecules can and should be applied to the AI inside commercial operations, that doing so is accessible to a single operator on a modest tooling budget, and that a commercial leader who installs this discipline before scaling AI will avoid the failure mode that is consuming 95 percent of the field. Section 8 lays out how to do it in three phases.


2. The Measurement Gap

There are two kinds of AI case studies in the published record, and neither one measures the AI.

The first kind reports outcomes. Market Logic, for instance, reports that its DeepSights AI platform at Novartis "reduced primary market research spend by 56 percent" and saved "millions through reduced duplication of spend" (case study). That is a real and impressive result. But it measures a business outcome, not the system. It cannot tell you whether the AI was right 99 percent of the time or 70 percent of the time, whether its quality was stable run to run, or whether removing it would have changed anything. The headline number is downstream of a hundred unmeasured judgments.

The second kind reports engineering evaluations. Promptfoo, MLflow, and the broader ML-tooling literature describe assertion harnesses and eval suites in technical detail (Promptfoo; MLflow). These do measure the system. But they are written for machine-learning engineers, not for a VP of Commercial Strategy, and they stop at the engineering boundary. They never translate the pass-rate delta on an assertion suite into the statement a brand team can act on: here is why you can trust this output, and here is what it would cost you to be wrong.

The gap between these two literatures is precisely where a commercial leader lives. You do not want a dollar figure you cannot interrogate, and you do not want an eval harness you cannot read. You want to know, in language you already trust, whether the AI doing work inside your commercial operation actually does that work, how reliably, and how you would know if it stopped.

Dimension Outcome-only reporting System measurement (this report)
What is measured Business result (cost, time, revenue) The AI system's output quality, directly
Comparison basis Before vs after, or vs target With-system vs without-system control arm
Attribution Inferred, often confounded Isolated to the system's contribution
Failure visibility Only when the outcome disappoints At the assertion level, before deployment
Reproducibility Rarely re-run Re-run at higher sample size on demand
Reader C-suite (trusts the number) C-suite (can interrogate the number)
Critical Insight: Pharma doesn't need a new discipline to measure AI. It needs to point an existing one at a new target. The randomized controlled trial is the most trusted measurement instrument your organization already understands. The only novel move is aiming it at the AI instead of the molecule.

3. Method: Clinical-Trial Discipline for AI

The measurement protocol used for all six systems maps, element for element, onto the architecture of a controlled trial. This is not an analogy offered for color. It is the literal design.

Clinical-trial element AI measurement equivalent How it was operationalized
Pre-registered endpoint Assertion Each system's output quality is defined by explicit pass/fail criteria written before the test
Treatment arm "with_skill" condition The AI with the Penwood system loaded
Control arm "without_skill" condition The same AI, same prompt, same session, system removed
Randomization / parallelism Parallel subagent harness Each test prompt run independently across both arms
Blinded adjudication Independent grader A separate grader process scores each assertion against cited evidence
Primary efficacy measure Pass-rate delta (pp) (with_skill pass rate) minus (without_skill pass rate)
Sample size / power n per cell Re-run at n=2 when a single run looked like noise
Protocol amendment Iteration ("sharpening") Non-discriminating assertions replaced, then re-measured

Two design choices deserve a commercial leader's attention because they are where measurement integrity is won or lost.

First, the control arm is the same AI, in the same working session, given the same prompt, with only the system removed. This is the cleanest possible comparison. It rules out the obvious confound ("maybe a better model would have done it anyway") because the model is held constant. The only variable is the Penwood system. Any pass-rate difference is attributable to the system and nothing else.

Second, the assertions are written first. Borrowing the discipline's own phrasing: the judges are the specification. Writing them before you build forces you to articulate what "good" actually means in measurable terms, rather than admiring the output after the fact and calling it good. A commercial leader who has sat through a vendor demo knows the difference between "this looks impressive" and "this passed 52 of 52 criteria we defined in advance." Only the second is evidence.

Architectural Pattern Thesis: A measurement is only as honest as its control arm and its pre-registration. Hold the model constant, define success before you build, grade blind, and the resulting delta is not a marketing number. It is the system's measured contribution, defensible to anyone who would interrogate a trial readout.

One operational note for credibility. A recurring failure mode in this kind of measurement is the "context leak," where the test prompt accidentally tells the AI the answer, inflating the control arm and compressing the delta. Penwood codified an explicit audit against this and applied it at authoring time on later systems. Section 5 shows what happens when that audit is not tight enough.


4. Six Systems, Measured

Penwood runs its operations on a set of AI systems, each owning a function a commercial team would recognize: voice and messaging discipline, quality-assurance review of customer-facing material, publishing orchestration across channels, client-feedback synthesis, internal-discipline capture, and editorial production. Each was built and then measured against its own assertion suite under the protocol in Section 3.

A note on language: these are referred to internally as "skills," a developer term. For a commercial reader, the useful framing is that each is a reliability layer for a specific commercial output. The voice system is the difference between on-brand and off-brand copy. The QA system is the difference between a deliverable that clears review and one that embarrasses you. The point of measuring them is the same point as measuring anything else that touches a customer: you want to know it works before it ships.

System (commercial function) First measurement After iteration Strongest reported result Source
Voice and messaging discipline +66.7pp +100.0pp 15/15 with vs 0/15 without BR-V (May 22)
Customer-facing QA review +60.0pp +100.0pp +96.65pp ± 4.74pp at variance check BR-Q (May 22)
Editorial production +35.3pp +100.0pp 17/17 with after 3 spec fixes BR-E (May 22)
Publishing orchestration +96.2pp (iter-0) 51/52 with vs 1/52 without BR-P (May 24)
Internal-discipline capture +87.5pp +68.75pp (see S5) 16/16 with vs 2/16 without BR-I (May 24)
Client-feedback synthesis +88.46pp (iter-0) 52/52 with vs 6/52 without BR-C (May 24)

Three results are worth reading closely, because they show the measurement doing different kinds of work.

The client-feedback synthesis system is the strongest single anchor. It was tested against the largest suite in the set: 13 realistic prompts spanning 9 operating modes, 52 assertions in total. With the system loaded, it passed all 52. Without it, the baseline AI passed 6. A +88.46pp delta on a 52-assertion suite is a far more demanding result than the same delta on a 4-assertion suite, because there are 52 independent ways to fail and the system failed none of them. This is the difference between a small sample looking clean and a large sample staying clean.

The publishing orchestration system shows what a near-ceiling looks like honestly. It passed 51 of 52 assertions with the system loaded, 1 of 52 without. The single with-system miss is reported rather than rounded away, which is the point: a +96.2pp delta with one named miss is more trustworthy than a +100pp delta with the misses hidden.

The voice and editorial systems show iteration earning its keep. Voice discipline opened at +66.7pp and reached +100pp after one sharpening cycle. Editorial production opened at a modest +35.3pp, which on inspection was a signal about the eval design rather than the system, and after three targeted fixes reached a perfect 17 of 17 with the system loaded. The lesson a commercial leader should take is that a low first number is not a verdict. It is a prompt to look harder at how you are measuring before you judge what you measured.

Across all six systems, one structural fact held without exception, and it is the subject of Section 6: the with-system condition showed zero run-to-run variance. The systems are stable. All of the noise lived on the baseline side.


5. What Went Wrong, and Why That Matters

Reporting Standard: A report that only contains wins is a brochure. An honest one reports the losses too.

The measurement protocol used here produced at least one clean failure, and reporting it is the point.

The internal-discipline capture system opened at a strong +87.5pp (16 of 16 assertions passing with the system, 2 of 16 without). On the next iteration, Penwood attempted to sharpen two of the assertions, making them harder, on the theory that tougher criteria would widen the measured gap. One of those sharpened assertions backfired.

The intent was to force a specific discipline by requiring the AI to read the body of a source file and cite a named section. The expectation was that the control arm (no system loaded) would fail, because only the system encoded that discipline. Instead, the control arm passed. The baseline AI, confronted with a prompt that named a file, simply read the file and cited it correctly. The sharpened assertion had raised the bar to a height the baseline could also clear, which inflated the control arm and dropped the measured delta from +87.5pp to +62.5pp on a single run.

Rather than accept the soft number or quietly revert, Penwood treated it as a clinical trialist would treat a surprising single-run result: it re-ran at higher sample size (n=2) to separate genuine effect from run-to-run noise. The with-system condition recovered to a perfect score, confirming the system itself was never the problem. The control arm's gain held, confirming the assertion had genuinely become learnable without the system. The recovered delta settled at +68.75pp, and the original +87.5pp was retained as the canonical floor because the sharpening attempt had not actually improved anything.

Stage With-system Without-system Delta
Original measurement 16/16 2/16 +87.5pp
Sharpening attempt (n=1) 14/16 4/16 +62.5pp
Variance re-check (n=2) 16/16 5/16 +68.75pp recovered
Critical Methodology Learning: The backfire produced the most valuable lesson in the entire experiment. A sharpened criterion only widens a measured gap if it targets discipline that lives only inside the system. If the criterion targets behavior any competent baseline can produce when prompted, you have not measured your system harder. You have measured your prompt. The fix is to design assertions around the orchestration and routing logic that exists nowhere else, which is exactly what the companion system did on the same iteration, where a properly targeted sharpening discriminated cleanly.

This is not a story most vendors would tell. It is the story a commercial leader should want, because it is direct evidence that the numbers elsewhere in this report were not curated. A measurement process that can report its own backfire is a measurement process you can trust on the wins.


6. Architectural Patterns

Six systems measured under one protocol surfaced a small number of patterns that generalize beyond Penwood. A commercial leader evaluating an AI investment can use these as diagnostic questions.

Pattern What was observed Implication for a commercial buyer
Variance lives on the baseline side The with-system condition showed zero run-to-run variance across all six systems; only the control arm varied A well-built system is more predictable than raw AI, not less. Demand variance data, not just a mean
Named-delegate routing reproduces Systems that route work to named sub-processes reproduced an ~85pp-plus baseline delta consistently Reliability comes from explicit routing, not from a bigger model. Ask how work is routed
Cross-system propagation Fixing a rule once at the upstream system let downstream systems inherit it through delegation Quality compounds when systems share a spine. One fix can lift several outputs
Variance floors hold Each system established a measured floor that maintenance runs check against You can set a quality SLA on an AI system and detect drift against it
Sample size changes the verdict A soft single run (Section 5) became interpretable only at n=2 Never accept a one-run AI claim. Power matters here exactly as it does in a trial
Critical Insight: The most counterintuitive finding for a buyer conditioned by AI hype is that variance lives on the baseline side. The fear is that AI is unpredictable. The measurement shows the opposite once a system is in place: the system removes the variance, and what remains unpredictable is the unaided model. The system is not the risk. The absence of one is.

These patterns are why measurement is not a one-time gate but a standing discipline. Penwood pairs every edit to a measured system with a re-run against its suite, so a change that silently degrades quality is caught at the assertion level rather than discovered in a customer-facing miss.


7. The Agentic Commercial Operations Ladder and ROI

The six systems are not the endpoint. They are the first rung of a three-layer model for how AI moves from a productivity tool to the operating layer of a commercial function.

Layer 1, Standalone reliability systems. Individual measured systems that each guarantee one output (voice, QA, a specific deliverable). This is where most organizations should start, and where measurement matters most, because it is where trust is built.

Layer 2, Orchestrated systems. Multiple systems routed together, where one system hands work to the next under explicit rules (the "named-delegate routing" of Section 6). Penwood's publishing orchestration is a Layer 2 system: it coordinates voice, QA, and editorial production into one pipeline.

Layer 3, Full agentic stack. A standing set of orchestrated systems running the commercial operation continuously, with measurement as the control system. This is the destination, not the entry point, and it is only safe to build on top of Layers 1 and 2 that have been measured.

The ROI of installing this discipline is best read across four stakeholder dimensions rather than a single number, because the value lands differently for each.

ROI dimension What it captures Score (0-100)
Practitioner value Output reliability the operator can stake their name on 95
Operator value Time reclaimed and rework avoided once systems are measured and stable 88
Future-client value Transferable methodology a client can install in their own commercial operation 92
IP-asset value A reusable, evidence-backed operating model that compounds over time 90
Composite 91
Catalyst Thesis: The catalyst is not a better model arriving next year. It is the decision to measure the models you already have. You climb to Layer 3 on evidence, or you build a stack you cannot defend.

8. Strategic Recommendation

For any commercial leader embedding AI into operations, the recommendation is direct, with one firm caveat: measure before you scale, and treat measurement as infrastructure, not as a one-time check. The discipline below is the minimum that earns trust.

Warning: Mediocre measurement is worse than none, because it manufactures false confidence.

Phase 1, Foundation (0 to 3 months). Pick the two or three commercial outputs where an AI miss would cost you most (regulated copy, customer-facing deliverables, launch materials). For each, write the assertion suite first: the explicit criteria that define an acceptable output. Build the AI system to clear them. Measure with-system versus without-system. Do not scale anything yet. The deliverable of this phase is trust, evidenced by deltas.

Phase 2, Discipline (3 to 6 months). Institute the standing rule that every change to a measured system triggers a re-run of its assertion suite. Add the context-leak audit so your tests measure the system, not the prompt that calls it. Re-run any soft result at higher sample size before believing it. This is the phase that prevents silent regression, and it is the phase most organizations skip, which is why their pilots quietly degrade.

Phase 3, Scale (6 to 12 months). Only now orchestrate systems together (Layer 2), with measurement as the control that detects drift. Climb to a full agentic stack (Layer 3) one measured rung at a time.

Critical Success Factors. Five conditions gate this recommendation. (1) Assertions written before building, not after. (2) A genuine control arm holding the model constant. (3) Independent, blinded grading. (4) Sample size discipline on any surprising result. (5) Measurement re-run on every change, enforced as a standing rule rather than left to good intentions.

Risk Factors. Four risks pressure-test it. (1) Context leak inflating the control arm and hiding real value (Section 5). (2) Sharpening criteria that target generalist behavior rather than system-specific discipline. (3) Treating a single run as a verdict. (4) Reaching for Layer 3 before Layers 1 and 2 are measured, which reproduces the field's dominant failure mode.

The accessibility point is the close, and here I will drop the institutional voice and speak plainly. I did not do this with a consultancy or an engineering bench. I did it as one operator, with no engineering team, inside a roughly 200-dollar-per-month AI tooling budget. The methodology does not require scale. It requires discipline. And it is installable inside an existing commercial operation without a transformation program.


9. Methodology and Sources

Measurement framework. All six systems were measured using Anthropic's skill-creator evaluation framework (the harness that runs with-system versus without-system comparisons, parallel test execution, and independent grading; Anthropic skills repository, commit b9e19e6f, dated 2026-04-20). The assertion suites, the commercial-operations application, the six-system operating model, and the clinical-trial translation are Penwood's. skill-creator is the instrument; the experiment design, the targets, and the results are Penwood's own.

Primary evidence. Every figure in this report traces to a dated baseline report: voice, QA, and editorial systems to BR-V, BR-Q, and BR-E (May 22, 2026); publishing orchestration to BR-P (May 24); internal-discipline capture to BR-I (May 24) and its iteration-1 follow-up; client-feedback synthesis to BR-C (May 24). Measurement cadence and the four architectural patterns are documented in the Penwood Skill-Creator Cadence (CAD).

Independent landscape verification. The claim that no comparable case study exists in the published record was verified against a competitive scan dated 2026-05-28, covering Anthropic's published skill registry (Cisco, ElevenLabs, Hugging Face), pharma-AI case studies (Novartis, Sanofi, IQVIA, ZS Associates), and MBB/Big-4 pharma-AI whitepapers (McKinsey, BCG, Deloitte). None apply assertion-based system measurement to internal commercial operations. Full scan with source URLs available in the gated methodology report (CL-2026-05-28).

External citations. The 95-percent figure on enterprise AI pilots is from "The GenAI Divide: State of AI in Business 2025," MIT Project NANDA, lead author Aditya Challapally, August 2025. The Novartis insights-platform results are from Market Logic's published case study.

Request the full methodology. This public report carries methodology shape, headline deltas, and worked examples. The complete 52-assertion suites, per-assertion grader rationale, eval prompt text, and the full Phase 4 maintenance protocol are available to qualified commercial leaders on request. [Request the full methodology.]

Artifact Provenance Role in this report
6 baseline reports (BR-V, BR-Q, BR-E, BR-P, BR-I, BR-C) Penwood, May 2026 Source of every reported delta
Adoption plan Penwood, May 2026 Iteration arcs, variance figures
Cadence doc (CAD) Penwood, May 2026 Patterns, maintenance discipline
Competitive scan (CL-2026-05-28) Penwood, May 2026 Whitespace verification
skill-creator framework Anthropic skills repo, commit b9e19e6f Measurement harness

Penwood is a boutique advisory practice helping pharma and MedTech companies commercialize brands with AI as the operating layer. Penwood, Confidential.